Paper/Archive/CVE-2022-1752

CVE-2022-1752

polonel polonel/trudesk — Unrestricted Upload of File with Dangerous Type in polonel/trudesk

EPSS 2%CVSS 9.0

critical.is priorityof 100

43

CVSS 9.0 (CNA)9.0 / 10 × 3027.0 Not in CISA KEV+300.0 EPSS percentile 80.0.800 × 2016.0 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2.

Affected

ProductAffectedFixed inSource

polonel/trudeskunspecified – < 1.2.21.2.2CNA

Scores by source

@huntrdev (CNA)9.0CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

References

refhuntr.dev/bounties/66e9bfa9-598f-49ab-a472-752911df3f2d refgithub.com/polonel/trudesk/commit/d107f12e71c0fe1e7ac0fdc7463f59c4965a42cd